Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
File:                     RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft (raw, json)
Hash identifier:          sFNooy3+bum1RH6OKaLnKPyduM5BV4qKnrJn0XWB0sE=
Subject key identifier:   E6:9B:79:45:2B:03:7F:F7:10:FD:6D:43:59:EC:B6:68:81:07:B5:74
Authority key identifier: 44:83:31:85:1B:35:59:D3:CC:82:99:F6:B0:20:EF:37:8E:2E:4B:04
Certificate issuer:       /CN=448331851b3559d3cc8299f6b020ef378e2e4b04
Certificate serial:       0196B069C2808F0F50ED9072AC26E149F685
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
Manifest number:          065D
Signing time:             Thu 08 May 2025 15:00:43 +0000
Manifest this update:     Thu 08 May 2025 15:00:43 +0000
Manifest next update:     Fri 09 May 2025 15:00:43 +0000
Files and hashes:         1: Mr0WRrlMlv0_Evxeakjpwz7LiPg.roa (hash: gsCCcQlF73dWTqboxZPlvCMCNzkEYN7/m7aejhTDik0=)
                          2: RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl (hash: WaeNxPCbZ0EbDXSJKC579rjAFPLS10r6dm5BumS23fA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b0:69:c2:80:8f:0f:50:ed:90:72:ac:26:e1:49:f6:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=448331851b3559d3cc8299f6b020ef378e2e4b04
        Validity
            Not Before: May  8 15:00:43 2025 GMT
            Not After : May  9 15:00:43 2025 GMT
        Subject: CN=e69b79452b037ff710fd6d4359ecb6688107b574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:09:f5:39:5e:05:7f:09:df:21:07:7f:6b:30:
                    e8:26:d2:60:74:5a:e6:8d:61:80:0e:63:03:06:48:
                    9e:6f:2b:31:19:c1:20:1f:16:b7:32:e5:24:5c:88:
                    18:ba:94:37:51:a9:c1:85:ca:4f:13:36:38:02:0b:
                    50:0d:c9:e2:10:6e:90:19:f5:17:60:c0:a4:70:4a:
                    38:83:66:01:f2:b0:36:e1:42:af:14:a0:92:f5:55:
                    11:e7:5f:74:4a:4e:5e:17:16:60:f4:a5:45:2c:a3:
                    96:ff:8d:e3:b5:25:49:6e:2b:a1:a5:94:0b:e7:06:
                    30:d6:ad:1d:9a:67:15:af:4c:cf:bc:5b:7a:3e:ce:
                    b8:c6:dc:35:25:f9:4c:34:bc:b0:01:35:f8:32:13:
                    32:73:11:ff:7e:df:d0:c0:3e:d0:b3:97:ca:5a:53:
                    ba:ec:86:4a:b8:44:64:60:6b:bc:1d:b7:1a:ab:37:
                    ff:32:57:54:fd:f7:06:1f:87:a9:09:be:35:95:af:
                    ca:22:4b:d0:17:2b:99:be:86:9e:17:68:2f:f3:e3:
                    95:3e:10:f3:65:a1:53:47:0e:b8:e5:3e:f5:22:c5:
                    9e:50:6c:c6:d2:e9:98:40:97:8e:3d:3f:9c:0f:c0:
                    bf:30:13:00:7f:ab:97:83:bc:cd:ad:00:f1:d9:01:
                    ba:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9B:79:45:2B:03:7F:F7:10:FD:6D:43:59:EC:B6:68:81:07:B5:74
            X509v3 Authority Key Identifier:
                keyid:44:83:31:85:1B:35:59:D3:CC:82:99:F6:B0:20:EF:37:8E:2E:4B:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:0c:81:3f:fa:d5:09:5e:87:50:18:b7:f8:2a:be:44:e0:34:
         f1:4f:5f:5b:d2:01:75:9b:03:55:eb:00:a2:46:33:e5:88:9d:
         99:60:de:43:d3:6b:8e:2f:76:74:df:58:77:da:3f:2c:de:23:
         88:d3:82:b4:f6:52:85:f7:32:f7:11:06:26:73:0c:3e:cb:d1:
         d3:0d:58:43:d2:72:32:21:69:18:05:f0:f5:5f:3d:43:4a:1e:
         1d:8a:c9:74:f4:22:34:ab:59:e8:35:6d:37:fe:0e:9d:2d:78:
         76:e6:a4:21:d4:8c:0e:d6:32:ff:fe:ad:9d:02:90:a7:d0:29:
         a5:a1:d9:d5:e4:dc:d9:60:63:2d:bb:00:70:7e:84:35:1e:8a:
         02:8c:07:15:1a:2d:3e:49:2b:d1:da:87:00:ce:33:b6:50:44:
         97:e5:4e:3e:e2:ea:cc:26:08:15:29:a6:8f:0f:ed:02:94:56:
         4a:71:2a:21:84:31:88:57:33:71:e7:c4:8d:fb:bd:e3:a8:ee:
         24:a5:ce:b4:21:cf:ef:aa:d9:ce:73:c8:07:99:24:0d:76:f5:
         da:20:94:c6:03:5a:1b:fe:43:be:56:de:76:a8:47:95:81:5f:
         36:9d:66:3c:6b:96:77:17:a9:23:e0:c5:04:a6:de:b1:a0:d0:
         b1:60:5e:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZawacKAjw9Q7ZByrCbhSfaFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ODMzMTg1MWIzNTU5ZDNjYzgyOTlmNmIwMjBlZjM3OGUy
ZTRiMDQwHhcNMjUwNTA4MTUwMDQzWhcNMjUwNTA5MTUwMDQzWjAzMTEwLwYDVQQD
EyhlNjliNzk0NTJiMDM3ZmY3MTBmZDZkNDM1OWVjYjY2ODgxMDdiNTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgn1OV4FfwnfIQd/azDoJtJgdFrm
jWGADmMDBkiebysxGcEgHxa3MuUkXIgYupQ3UanBhcpPEzY4AgtQDcniEG6QGfUX
YMCkcEo4g2YB8rA24UKvFKCS9VUR5190Sk5eFxZg9KVFLKOW/43jtSVJbiuhpZQL
5wYw1q0dmmcVr0zPvFt6Ps64xtw1JflMNLywATX4MhMycxH/ft/QwD7Qs5fKWlO6
7IZKuERkYGu8Hbcaqzf/MldU/fcGH4epCb41la/KIkvQFyuZvoaeF2gv8+OVPhDz
ZaFTRw645T71IsWeUGzG0umYQJeOPT+cD8C/MBMAf6uXg7zNrQDx2QG61wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOabeUUrA3/3EP1tQ1nstmiBB7V0MB8GA1UdIwQY
MBaAFESDMYUbNVnTzIKZ9rAg7zeOLksEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8yYTlhY2YtMmYxZS00YzljLWI4MTAt
YTA0NzgxNmQ2MjgzLzEvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8yYTlhY2YtMmYxZS00YzljLWI4MTAtYTA0NzgxNmQ2Mjgz
LzEvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwyBP/rV
CV6HUBi3+Cq+ROA08U9fW9IBdZsDVesAokYz5YidmWDeQ9Nrji92dN9Yd9o/LN4j
iNOCtPZShfcy9xEGJnMMPsvR0w1YQ9JyMiFpGAXw9V89Q0oeHYrJdPQiNKtZ6DVt
N/4OnS14duakIdSMDtYy//6tnQKQp9AppaHZ1eTc2WBjLbsAcH6ENR6KAowHFRot
Pkkr0dqHAM4ztlBEl+VOPuLqzCYIFSmmjw/tApRWSnEqIYQxiFczcefEjfu946ju
JKXOtCHP76rZznPIB5kkDXb12iCUxgNaG/5DvlbedqhHlYFfNp1mPGuWdxepI+DF
BKbesaDQsWBeOg==
-----END CERTIFICATE-----
Generated at Thu May 8 20:30:04 2025 by rpki-client